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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 12 July 2000 , 
2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 
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8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 
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Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
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* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) ^ Notice of References Cited (PTO-892) 

2) [U Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date . 



4) □ Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) D Notice of Informal Patent Application (PTO-152) 

6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 2 





Application/Control Number: 09/614,983 
Art Unit: 2134 



Page 2 



DETAILED ACTION 



Claim Rejections - 35 USC § 102 



1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claims 1-60 rejected under 35 U.S.C. 102(b) as being preceded by Davis, US 
Patent NO. 5844986(hereafter referred to as '986). 

3. As to claims 1 and 21: 

'986 teaches a method for providing secure BIOS firmware updates comprising: 
Obtaining an update image corresponding to the update of the programmable memory/ 
Cryptographic coprocessor either passively/actively receives the new BIO program code 
(Col 3, Line 55, '986) 

Obtaining/evaluating application rules information from certificate associated with 
update / Digital signatures used in BIOS upgrade software (Col 4, Line 27, '986), 
Cryptographic coprocessor makes a validity determination based on the new BIOS 
program (Col 4, Line 8, '986) 

4. As to claims 2 and 22: 
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Update application rules comprise at least one of rules information associated with a 
manufacturer of a device... / Certificate associated with manufacturer (Col 2, Line 49, 
'986) 

5. As to claims 3, 4, 23, and 24: 

Update application rules comprise rules defining devices for which application of the 
update image is authorized... authorized device manufacturers / Certificate associated 
with manufacturer (Col 2, Line 49, '986) 

6. As to claims 5 and 25: 

Update application rules comprise rules defining how data form update iage is utilized to 
update programmable memory / If the new BIOS is determined to be invalid, it is 
deleted by the cryptographic coprocessor and never used (Col 4, Line 13, '986) 

7. As to claims 6 and 26: 

Update application rules comprise rules which identify installation information provided 
with the update image, utilizing the installation information / Digital signatures used in 
BIOS upgrade software (Col 4, Line 27, '986), Cryptographic coprocessor makes a 
validity determination based on the new BIOS program (Col 4, Line 8, '986) 



8. 



As to claims 7 and 27: 
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'986 teaches a method for providing secure BIOS firmware updates. '986 does not 
specifically teach for the BIOS management utility software to be obtained via 
download. The examiner takes official notice as to obtain the BIOS management utility 
software with BIOS upgrade via download. It would have been obvious to a person of 
ordinary skill in the art at the time of invention to obtain the BIOS management utility 
software with BIOS upgrade via download. One of ordinary skill in the art would have 
been motivated to obtain the BIOS management utility software with BIOS upgrade via 
download because it is customary to make Internet upgrades available with an 
installation program. Examples include Microsoft Windows upgrades and peripheral 
device driver upgrades, etc. 

9. As to claims 8 and 28: 

Verifying the authenticity of the update / Cryptographic coprocessor performs the 
appropriate authentication operations on the new BIOS program (Col. 3, Line 61, '986) 

10. As to claims 9 and 29: 

Evaluating the certificate... valid digital signature / Using the well known techniques of 
digital signatures and certificates to validate the integrity and validity of the new BIOS 
program (Col. 4, Line 1, '986) 



11. As to claims 1 0 and 30: 
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Decrypt the digital signature using a shared secret / authentication can be preformed... 
by the use of secret information (Col. 3, Line 65, '986) 

12. As to claims 11 and 31: 

Decrypting a digital signature using a public key from a certificate authority... comparing 
with precomputed value / public/private key cryptography... using techniques of digital 
signatures (Col. 3, Line 67, '986) 

13. As to claims 12 and 32: 

Public key is stored in non-updateable memory / Cryptographic coprocessor will be 
preloaded with the public key (Col 4, Line 31, '986) 

14. As to claims 13 and 33: 

Provide public key in previous version... obtain public key from programmable memory / 
Cryptographic coprocessor may be preloaded with another public key that may be used 
to authenticate a certificate chain to obtain this industry association public key (Col 4, 
Line 34 et seq., '986) 

15. As to claimss 14, 15, 34, and 35: 

Hierarchical plurality of certificates / certificate chain (Col 4, Line 36, '986) 



16. As to claims 16 and 36: 
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Hierarchical plurality of certificates / certificate chain (Col 4, Line 36, '986) 
Extract update application rules from each of the certificates / Using the well known 
techniques of digital signatures and certificates to validate the integrity and validity of 
the new BIOS program (Col. 4, Line 1 , '986) 

17. As to claims 17, 20, 37, and 40: 

Update only if all update application rules indicate that the update image is applicable to 
the device / Cryptographic coprocessor makes a determination as to the validity of the 
new BIOS program... revision date may be inappropriate ... If the new BIOS is 
determined to be invalid, it is deleted by the cryptographic coprocessor and never used 
(Col 4, Line 13, '986) 

18. As to claims 18, 19, 38, and 39: 

Update if any update application rules indicate that the update image is applicable to the 
device / In an authentication using only one application rule such as the validity of a 
digital signature, any of the [one] rules would render the update image applicable 

19. As to claims 41-60: 

Claims 41-60 correspond to claims 1-20. 



Conclusion 
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20. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jonathan R Adams whose telephone number is (703) 
305-8894. The examiner can normally be reached on Monday - Friday from 10am to 
6pm. 

21 . If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse, can be reached on (703) 308-4789. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306 

22. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 
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